{"report_id":"da035182-e5c9-47ce-a3f3-a6d8574dd9f4","version":0,"status":"done","tags":[],"date":"2026-08-10T19:06:20Z","url":{"schema":"http","addr":"chapo-dispatcher.cc/","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"ip":{"addr":"172.67.153.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chapo-dispatcher.cc/","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"title":"Bot Panel","dom":{"size":20191,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (622)","md5":"beae56e04c65384aecbc05d0be0c3e0c","sha1":"e232a5714a10ba76c1b05e2da42c5891216a0ce3","sha256":"3dbd561e48a8f05f09c1a68aa8732f869d496062245ca6ed27b0e247606e8d81","sha512":"172cf3ae71c0e0ccd7a67ea3cdcbc5e7966875f57df09db032b30958dc3f5142e342397951dc2b0b957d6dcc223ed9bb36c1a452724b86f7f13ccd88bd3daafc","ssdeep":"192:bCU0POGYt945xUX/mEkfWYYE0c/hoEyPXtKZpZdQc4n4a5rlT308jfX2lZ:i2GQXobZdh4n4A3FoZ","tlshash":"1092a43972b71161b823d6ac27b757982250f10bbc05cd283addb5588fcdba458d2abc","dom_hash":"domhash4c79eaba2fb7bbe2af7bc336b13ac10b","first_seen":"2026-08-10T18:41:42.048677Z","last_seen":"2026-08-10T19:06:21.716276Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chapo-dispatcher.cc/","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"ip":{"addr":"172.67.153.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T19:06:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"chapo-dispatcher.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-08-06T05:47:33.687564Z","alert_count":0,"request_count":5,"received_data":227215,"sent_data":2481,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":2,"received_data":52958,"sent_data":1119,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chapo-dispatcher.cc","ip":{"addr":"104.21.90.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-17","domain_rank":0,"first_seen":"2026-08-10T18:41:38.258073Z","last_seen":"2026-08-10T18:41:38.258073Z","alert_count":3,"request_count":3,"received_data":23474,"sent_data":1474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oauth.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":101848,"first_seen":"2018-02-07T13:36:20Z","last_seen":"2026-08-08T03:20:30.600484Z","alert_count":0,"request_count":1,"received_data":2048,"sent_data":703,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":6557,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","fqdn":"oauth.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"53b6be0f202fb25fce4076bd27f2d81a","sha1":"3dd9cf1fafdd5181d0848a1f98c8bf5014f3f48a","sha256":"5a7b86e7a9338bb7c9a0eecd966f2b42a1be4da0e316561a156b3f4671b353db","sha512":"fa18fcb80315b969fc040d03ea94a41a845e352d53b66d46ddbaf95d9ef936eff286e18145ad9519b2174d62e8eb4316f957f85ed71b5fafeed692c69991fdd4","ssdeep":"","tlshash":"2b600000003c330000c33c03c00f30f033c03000000000000000000000c000c0003003","size":13,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-08-13T20:39:07.306117Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","fqdn":"oauth.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"83b939a5137708ecbf636044941e9497","sha1":"60ffe5202e1fba90546c1f25c00955217d711f14","sha256":"b2c73c6a912326a48354ab9f0e96fe92d1f657f38e43f9cd7b2613f46a2a8dcf","sha512":"5f0041bf99881e9ed1faea5144b459a41f4c6d5996ca98599a424dc2cdd9bbd2baf703b330a44bb38bbbe5ee515c3033be217237bba52087bd5ea3b216539cf0","ssdeep":"","tlshash":"e2c022a33bc50020e2c0c2c00e136b02368ba0e50809e919020db844055a8c95128e3d","size":178,"data":"","first_seen":"2026-08-10T18:41:42.062289Z","last_seen":"2026-08-10T19:06:21.737138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?68","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b93037d25be1dbdd02c29312ffd2b5d","sha1":"30b09f25657153450756b4eae4d8436ecb7e3ca2","sha256":"4e0256bcac38475eed5a0a0d331eee63934357b5808881209641d2b320176534","sha512":"abc82a6ac1e87f4fa4e391eccacc4d064dcd940d3d9ba02c0b5e6b7a758ea88504db4524076eef1fbc651543fb1c8571fafe8305b2f236bc6ff6921953631a19","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAK:+j2jNt3Qsyk7L1ZF8sv7e6Y","tlshash":"41934f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfabf8","size":96939,"data":"","first_seen":"2026-06-26T19:08:01.937336Z","last_seen":"2026-08-13T20:39:07.304826Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chapo-dispatcher.cc/","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"ip":{"addr":"104.21.90.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17a7d5e7749bb7a9fc7b8ac7b215cfd4","sha1":"33352c7f256d8ac664d2660c9c405c282f2ce206","sha256":"0ef1a2df048b87b27f6236166bcd9be723b5000d9cfddb25e31a4b6645605873","sha512":"35daebb74fa0c0867d0cce8e1f57c6f1e020abb80c2e10b012b7233e19c88a5d65944c3e2ad8aea71c443f4697aa8dafb5c48022b2e4d40743105be6ad7aeb65","ssdeep":"96:sKCvCJaKf8lBUqUQ5ZU4nSvnZs9a4/3JrlT3Sb3VnXGxNeyX7LGl2mLiBz:sKZpZdQc4n4a5rlT308jfX2lq","tlshash":"5ff11cb935f71a31f037d4ac863b603132a5b41b3852d855369cf99e4fdce2099a39b8","size":7611,"data":"","first_seen":"2026-08-10T18:41:42.06054Z","last_seen":"2026-08-10T19:06:21.739581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e716528b2cdf0e610389d0aab25c3c3","sha1":"1678b99b22271f2fb879e8a2e21b40d404c00d66","sha256":"3c8c27bf6f51a778ed94f452cf6b501f54703b67ef162551f677171916fbcd99","sha512":"1d6f969eecbb063f7dfcfa059bb9083a1b2344c49e8fe959b9e7bfd00160b880a56f58c51a47087d261960bd512e399f666cb82cb16f07d1d80d559190f4f382","ssdeep":"384:+vLsc8o/o9o7IFyWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SJ0CF3gLcHPb","tlshash":"ba92819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20474,"data":"","first_seen":"2026-06-30T03:18:52.0536Z","last_seen":"2026-08-13T22:16:59.527004Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Mono:wght@400;700\u0026family=Syne:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:53.907Z","timestamp":1786388753907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Space+Mono:wght@400;700\u0026family=Syne:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chapo-dispatcher.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 19:05:53 GMT\r\ndate: Mon, 10 Aug 2026 19:05:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5873,"size_decoded":1322,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"26bf1ae01cf99526a991bb26469c4fde","sha1":"c4e766898a88d9f0c6b2fce7c61565a14373df3e","sha256":"90f2e0589010bbc733fa7a2d9023806c9762e7c86ffc39405d78c97fadebc1d9","sha512":"3f357838a21cd2dea08902533cc7dc7ddd48e8607b141e2e39e6081227b52aad27700e7a8cf84928db4b0c34daa0a7ac53d4b0ad646cff419ef850fe20f0c71a","ssdeep":"96:cCOEalOEatJc+uOOEatNDCOpaxOpaxJc+uOOpa+NnOEadePOEaMFJc+ueOEaKNn+:cV6FY7sbBxjdeYMt0xdeCMt+rdeEMtIV","tlshash":"6ec1ced1046b9400eb570cc267ce7e32ee8e7154a485d5799ffe1c9cacabc266321b1e","first_seen":"2026-05-10T19:24:10.217103Z","last_seen":"2026-08-10T19:06:21.718703Z","times_seen":6,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:53.909Z","timestamp":1786388753909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-widget.js?22 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chapo-dispatcher.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 10 Aug 2026 19:05:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 16:53:08 GMT\r\netag: W/\"6a42a2f4-4ffa\"\r\nexpires: Fri, 14 Aug 2026 19:05:53 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20474,"size_decoded":6365,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"2e716528b2cdf0e610389d0aab25c3c3","sha1":"1678b99b22271f2fb879e8a2e21b40d404c00d66","sha256":"3c8c27bf6f51a778ed94f452cf6b501f54703b67ef162551f677171916fbcd99","sha512":"1d6f969eecbb063f7dfcfa059bb9083a1b2344c49e8fe959b9e7bfd00160b880a56f58c51a47087d261960bd512e399f666cb82cb16f07d1d80d559190f4f382","ssdeep":"384:+vLsc8o/o9o7IFyWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SJ0CF3gLcHPb","tlshash":"ba92819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2026-06-30T03:18:52.0536Z","last_seen":"2026-08-13T22:16:59.527004Z","times_seen":154,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":28,"connect":22,"send":0,"wait":24,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:54.029Z","timestamp":1786388754029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chapo-dispatcher.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:57:00 GMT\r\nexpires: Sat, 07 Aug 2027 18:57:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259734\r\nlast-modified: Tue, 16 Sep 2025 13:27:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34608,"size_decoded":35421,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34608, version 1.0","md5":"559e8363d74f653c3f4f0a70caed2053","sha1":"0f50393efc7790d897e00024335d2c3398c13916","sha256":"68b623f0e45b905041b2edb9b2e4f563a505f13db1cd06b5f1946eb2e1f47048","sha512":"52fa63b0757b446e366b062b11b38fd9e81c5f752541b265d358d0e8a789eeb36bc322deb3e2719717401d91f9c3fa1f5cfb80a26ad9ae7451b068a88f3d5d3a","ssdeep":"768:VCLAKNFxbb9iPf3U0gTLKtAE54FB+6sfkxEpIX5yNz0zRjcUfgg:VCcgeHmTmL54F16a2aVpfB","tlshash":"d3f2f19ad9096d0dd938077603a230e6ec95197b3150f19e313a34231e7fae0a7dd6bc","first_seen":"2025-06-03T14:30:46.285622Z","last_seen":"2026-08-14T03:09:29.107785Z","times_seen":4723,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:54.030Z","timestamp":1786388754030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chapo-dispatcher.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:13:36 GMT\r\nexpires: Thu, 05 Aug 2027 13:13:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 453138\r\nlast-modified: Wed, 25 Jun 2025 16:58:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":16724,"size_decoded":17537,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16724, version 1.0","md5":"e5e908997a453e21f2fe41cb72e186d2","sha1":"d0c504bd8f896d39883e0ddfc81c511af526656b","sha256":"2d46bd159b53f55c41167a4f1540a074649464194fd1e416f5b4694a6c0f282c","sha512":"dd6bf730a4b16a50b0977b2d8efe865be0805da41c50aa86d39b4892c79db91f354e91b1a2ce4198e4b58e26752d4e9a06e33e9911e63f2df2e004d610685cd8","ssdeep":"384:ZRyfvfqIrJOZA3s5dQsQLR7JIWapcGsukRYRv5fpD:ZUXfNs5IRQ3zkCZ5fpD","tlshash":"8f72d0b8fe064610c2542fbf06209de1831895fe192e4f24f8aa74ac4f1715e3f117ba","first_seen":"2025-02-19T12:54:04.600022Z","last_seen":"2026-08-13T17:51:49.848829Z","times_seen":3093,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":29,"dns":1,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chapo-dispatcher.cc/api/me","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"ip":{"addr":"104.21.90.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:54.033Z","timestamp":1786388754033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chapo-dispatcher.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 16:30:04 GMT","end":"Sun, 13 Sep 2026 16:30:03 GMT"},"fingerprint":{"sha1":"76:5E:D0:5D:37:F1:16:5B:2E:4A:FB:48:F6:33:F7:94:8C:5B:02:40","sha256":"79:DE:48:6F:A0:3C:46:3E:20:68:23:F6:65:0E:A5:AA:2D:1A:C7:92:4C:C9:E9:2B:F6:36:05:C1:BB:78:82:D5"}}},"request":{"raw":"GET /api/me HTTP/1.1\r\nHost: chapo-dispatcher.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chapo-dispatcher.cc/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://telegram.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https://t.me https://telegram.org https://*.telegram.org; connect-src 'self'; frame-src https://telegram.org https://oauth.telegram.org; form-action 'self'; base-uri 'self'\r\ncontent-type: application/json\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Cookie\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdSp%2BVgaIGG0%2B3bnDIxPoqncHDtPePk8I7EUq3yaKQ3mb1hbeicrIs9UaVjcWH%2BN6AXo0y9n1ig2mqgwOLoBGwTxXd%2Fa%2BzSSdIPIRwvKQ3sX%2B%2FWAIeENlIUkOdbJAUYwxZ1rY7xv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2914650a83e4e4c-OSL\r\ncontent-length: 30\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":1244,"mime_type":"application/json","magic":"JSON text data","md5":"e6d1efd496f045c04915e16b493fa40a","sha1":"af9333c7703c391a7f5149154f9add1bd65fafa8","sha256":"cfec9feffbcc0dabaa0f92491e3609eeb1e9bc8d17625cd7f043be03b609c812","sha512":"bee137c16415d42278a3756f045fbd2c020448a14369775aceef990ad92613bb3b8db3e4ee6a3a9777d2d288f9bcb3c7b75506ac85c09e992d6db6ddd58dbce3","ssdeep":"","tlshash":"b2800020e2800caac202c2e08208008002803b2800a0080a8020a822820828ea0bc0c2","first_seen":"2023-05-01T17:56:28Z","last_seen":"2026-08-13T06:56:37.484867Z","times_seen":740,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"chapo-dispatcher.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","fqdn":"oauth.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:54.041Z","timestamp":1786388754041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write HTTP/1.1\r\nHost: oauth.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chapo-dispatcher.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 714\r\nset-cookie: stel_ssid=02bae593c05fd60cf8_14381127464166383542; expires=Sat, 14 Aug 2027 04:45:19 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\nx-frame-options: ALLOW-FROM https://chapo-dispatcher.cc\r\ncontent-security-policy: frame-ancestors https://chapo-dispatcher.cc\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1483,"size_decoded":1279,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2bfe835fcc0805a0fe760c178bb83249","sha1":"20c554314dfe0dfee3d5f1564b48fd6180ce9f25","sha256":"c1be6854965092a2559aa9575f75316e399ffdac1c87bdf35c17f9f76d421b66","sha512":"0d2ca26b8d92e068045b33b1bb64b8e4b79f1fac6594de862a8c6fd0729397c1fb5452a4b02f7909c9ad0e605e09da3c4335e6c8d8f679e13fb1bd44a823f0f6","ssdeep":"","tlshash":"0b3130d31ae88415730141a254c2b2057e9ae0cfea48ed09798c30aadfe6ec189a742e","first_seen":"2026-08-10T19:06:21.725854Z","last_seen":"2026-08-10T19:06:21.725854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":3,"connect":22,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chapo-dispatcher.cc/favicon.ico","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"ip":{"addr":"104.21.90.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chapo-dispatcher.cc/","date":"2026-08-10T19:05:54.110Z","timestamp":1786388754110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chapo-dispatcher.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 16:30:04 GMT","end":"Sun, 13 Sep 2026 16:30:03 GMT"},"fingerprint":{"sha1":"76:5E:D0:5D:37:F1:16:5B:2E:4A:FB:48:F6:33:F7:94:8C:5B:02:40","sha256":"79:DE:48:6F:A0:3C:46:3E:20:68:23:F6:65:0E:A5:AA:2D:1A:C7:92:4C:C9:E9:2B:F6:36:05:C1:BB:78:82:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chapo-dispatcher.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chapo-dispatcher.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://telegram.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https://t.me https://telegram.org https://*.telegram.org; connect-src 'self'; frame-src https://telegram.org https://oauth.telegram.org; form-action 'self'; base-uri 'self'\r\ncontent-type: application/json\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6YAUfX3Bxl43h2szEVlQO3RPN54uXWs95yBtbmE%2BakTAV8UsaCLj2aobEu3fMfKHvRHhicv%2BOGHZPEKux5lu4d3Uye2OUI6QU3d9uiXlSmSLWVbG%2BK39Za%2FDKMB%2BLM%2BaWRgb4On\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a291465128564e4c-OSL\r\ncontent-length: 22\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22,"size_decoded":1250,"mime_type":"application/json","magic":"JSON text data","md5":"689525ee6c812e73a44b6aa1036ab53a","sha1":"7350cb4703a96ea7c140bd30da9a6d1bcff36eb2","sha256":"37ec4665a8102d115ffd1ac20dae94c98b4dac64b0c1a68228aa2a531caeb35d","sha512":"da6deff19f0b2bf5e0ef17b3cae34a0d44c5d48fbf9f3ffedd00cea74f923e1a3e9c4c926a6564c889cca21041550f557e1ec00db9e35502ffc794a5f9e9722e","ssdeep":"","tlshash":"5770000820028acc0000e0e0208c202000003b002020802a0000c020820028e20ac008","first_seen":"2023-04-08T18:32:13Z","last_seen":"2026-08-13T20:32:56.537169Z","times_seen":11051,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"chapo-dispatcher.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/widget-frame.css?75","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","date":"2026-08-10T19:05:54.170Z","timestamp":1786388754170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/widget-frame.css?75 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oauth.telegram.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: W/\"6a3eb584-162d7\"\r\nexpires: Fri, 14 Aug 2026 19:05:54 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90839,"size_decoded":23640,"mime_type":"text/css","magic":"ASCII text, with very long lines (2404)","md5":"b530bd3424269b8a6ced81780ae31eff","sha1":"ac2f152989766e418bc0bd31607915762d334512","sha256":"3cb24aa947b6d0c4a64f3c2dd4971847e83228fc03521cf74a38411cdb2372cc","sha512":"64220692ed3878b611d6f90c87013bdc7e9fc8f46eefaa5f136cdf318d11a07936100cde3f1b09847102ba715b99fc94379487e079f077c33824977d465fc39b","ssdeep":"1536:exwVvHIy0IZMqj/S1PqvJflMSnAk7Zu/2:hZa+1n9u+","tlshash":"7393c59f5ab1ad08782bc15b75c5761c2b3c9b87d505ee2a9ed930188f80ed5b83370e","first_seen":"2026-06-26T19:08:01.977055Z","last_seen":"2026-08-13T20:39:07.278684Z","times_seen":126,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chapo-dispatcher.cc/","fqdn":"chapo-dispatcher.cc","domain":"chapo-dispatcher.cc","tld":"cc"},"ip":{"addr":"104.21.90.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T19:05:53.338Z","timestamp":1786388753338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chapo-dispatcher.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 16:30:04 GMT","end":"Sun, 13 Sep 2026 16:30:03 GMT"},"fingerprint":{"sha1":"76:5E:D0:5D:37:F1:16:5B:2E:4A:FB:48:F6:33:F7:94:8C:5B:02:40","sha256":"79:DE:48:6F:A0:3C:46:3E:20:68:23:F6:65:0E:A5:AA:2D:1A:C7:92:4C:C9:E9:2B:F6:36:05:C1:BB:78:82:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chapo-dispatcher.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://telegram.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https://t.me https://telegram.org https://*.telegram.org; connect-src 'self'; frame-src https://telegram.org https://oauth.telegram.org; form-action 'self'; base-uri 'self'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 10 Aug 2026 19:05:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BejXLlmITda6DIG5CPppFGDZMcH8aWfDs9Lwhn0L%2FEpPM8t5quWceB8H4FeL2aPEShmRlc4V6iLQX%2FCSSa4DJGrcdxbNGMQUR13l55E7CkilbBcg3NhrG02c3GnACSwrHZrZ9ZfG\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\ncf-ray: a291464cbf6c4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19781,"size_decoded":6797,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c0f5c99f3a279ee92b5e9e980e0a4019","sha1":"9a240e1881ab9d41f6d8725a2f7c937773e3271d","sha256":"e085a85dea8d6b951b92fb792f330f830940dda636fca4108a5544b332d1237d","sha512":"9ccf615a81816d57d0e4584fa3bff76855579ffd4aee4b65d9b5c87e56e53b8a7443a75dc59d5f572d459c679bc30909fc9f4b210cd589fd6eb92248088f6303","ssdeep":"192:dYU0POGYt945xUX/mEkfWYYE0c/howOVqtKZpZdQc4n4a5rlT308jfX2ld:u2SKqobZdh4n4A3Fod","tlshash":"ef92943976b71161b423d6ac27bb57982250b00bbc05cd283bddb5588fcdba498d2dbc","first_seen":"2026-08-10T18:41:42.050924Z","last_seen":"2026-08-10T19:06:21.73016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":42,"connect":19,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"chapo-dispatcher.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/font-roboto.css?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","date":"2026-08-10T19:05:54.168Z","timestamp":1786388754168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oauth.telegram.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: W/\"63512b7d-1816\"\r\nexpires: Fri, 14 Aug 2026 19:05:54 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6166,"size_decoded":1023,"mime_type":"text/css","magic":"ASCII text","md5":"c706681409217a14a24c7e2deb8cf423","sha1":"08b443fe5bc6a223a9de08fb56282365b1d13857","sha256":"84b97b3fa8847b64c6d3833561e4b3146530577171e85ad226578a087db70974","sha512":"2520a5417426cea58972529b3776713958ff259cc8467ebafbe291bd040e27195054c4133f4a9518d78da38ddf4f7cdac64da0813da33bbe707ad13af5baa7c1","ssdeep":"192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t","tlshash":"53d18b40485a6000eb871cd677cf7e3abd8e55053042c576effd14a8adebc269368b4e","first_seen":"2023-05-29T15:15:29Z","last_seen":"2026-08-13T20:39:07.301112Z","times_seen":19255,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?68","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","date":"2026-08-10T19:05:54.173Z","timestamp":1786388754173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/widget-frame.js?68 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oauth.telegram.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: W/\"6a3eb584-17aac\"\r\nexpires: Fri, 14 Aug 2026 19:05:54 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96940,"size_decoded":27085,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3713)","md5":"7b93037d25be1dbdd02c29312ffd2b5d","sha1":"30b09f25657153450756b4eae4d8436ecb7e3ca2","sha256":"4e0256bcac38475eed5a0a0d331eee63934357b5808881209641d2b320176534","sha512":"abc82a6ac1e87f4fa4e391eccacc4d064dcd940d3d9ba02c0b5e6b7a758ea88504db4524076eef1fbc651543fb1c8571fafe8305b2f236bc6ff6921953631a19","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAK:+j2jNt3Qsyk7L1ZF8sv7e6Y","tlshash":"41934f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfabf8","first_seen":"2026-06-26T19:08:01.937336Z","last_seen":"2026-08-13T20:39:07.304826Z","times_seen":126,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oauth.telegram.org/embed/wellcomechapo1_bot?origin=https%3A%2F%2Fchapo-dispatcher.cc\u0026return_to=https%3A%2F%2Fchapo-dispatcher.cc%2F\u0026size=large\u0026request_access=write","date":"2026-08-10T19:05:54.244Z","timestamp":1786388754244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://oauth.telegram.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/font-roboto.css?1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 10 Aug 2026 19:05:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Fri, 14 Aug 2026 19:05:54 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11028,"size_decoded":11379,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-08-14T01:18:36.665142Z","times_seen":75671,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}